Method for a Multi-Country Data Pipeline to Protect Personally Identifying Information

1. A method for a multi-country data pipeline to protect a Personally Identifying Information (PII) for each user in a plurality of users, comprising the steps of: receiving, by a first application, entered data from a user, wherein the first application, the entered data and the user are all physically located in a first country and the entered data comprises non-personal data and the PII; receiving, by the first application, a schema based on a privacy policy for the first country; identifying, by the first application, the non-personal data and the PII in the entered data based on the schema; generating, using a one-way hash, an Identification (ID) tag for the PII; storing, in an identity store, the ID tag and the PII, wherein the identity data store is configured so that when it receives the ID tag, the identity data store outputs the PII; creating an anonymized data by replacing the PII, in the entered data, with the ID tag for the PII, wherein the anonymized data contains no PII; transmitting, through the multi-country data pipeline, the anonymized data from the first country to an analytics function in a second country; generating, by the analytics function, a results based on the anonymized data; creating an anonymized results by adding the ID tag to the results, wherein the anonymized results contains no PII; transmitting, through the multi-country data pipeline, the anonymized results from the second country to a second application in the first country; upon authenticating the user, transmitting the ID tag to the identity data store; receiving the PII associated with the ID tag from the identity data store; adding the PII received from the identity store to the anonymized results to create an identified results; and performing an action by the second application based on the identified results.

2. The method of claim 1 , wherein the schema identifies a plurality of PII fields in the entered data based on the privacy policy for the first country.

3. The method of claim 1 , wherein the schema was received from, and is stored in, a third country and the first country, the second country and the third country are three different countries.

4. The method of claim 1 , wherein the PII never leaves the first country.

5. The method of claim 1 , wherein the first application is a different application from the second application.

6. The method of claim 1 , wherein the first application is the same application as the second application.

7. The method of claim 1 , wherein a plurality of schemas include the schema and the plurality of schemas are all stored in a database in a third country.

8. A method for a multi-regional data pipeline to protect Personally Identifying Information (PII) for each user in a plurality of users, comprising the steps of: receiving, by a first application, entered data from a user, wherein the first application, the entered data and the user are all physically located in a first geographical region and the entered data comprises non-personal data and a plurality of PII; receiving, by the first application, a schema based on a privacy policy for the first geographical region; identifying, by the first application, the non-personal data and the plurality of PII in the entered data based on the schema; generating, using a one-way hash, an Identification (ID) tag for each PII in the plurality of PII in the entered data, thereby generating a plurality of ID tags that correspond to the plurality of PII in the entered data; storing, in an identity store, the plurality of PII and their corresponding plurality of ID tags, wherein the identity data store is configured so that when it receives an ID tag, the identity data store outputs the corresponding PII; creating an anonymized data by replacing each PII in the plurality of PII with its corresponding ID tag, wherein the anonymized data contains none of the plurality of PII; transmitting, through the multi-country data pipeline, the anonymized data from the first country to an analytics function in a second country; generating, by the analytics function, a results based on the anonymized data; creating an anonymized results by adding the plurality of ID tags to the results, wherein the anonymized data contains no PII; transmitting, through the multi-country data pipeline, the anonymized results from the second country to a second application in the first country; upon authenticating the user, transmitting the plurality of ID tags to the identity data store; receiving the plurality of PII corresponding with the plurality of ID tags from the identity data store; adding the PII received from the identity store to the anonymized results to create an identified results; and performing an action by the second application based on the identified results.

9. The method of claim 8 , wherein the schema identifies a plurality of PII fields in the entered data based on the privacy policy of the first country.

10. The method of claim 8 , wherein the schema was received from, and is stored in, a third country and the first country, the second country and the third country are three different countries.

11. The method of claim 8 , wherein the PII never leaves the first country.

12. The method of claim 8 , wherein the first application is a different application from the second application.

13. The method of claim 8 , wherein the first application is the same application as the second application.

14. The method of claim 8 , wherein a plurality of schemas include the schema and the plurality of schemas are all stored in a third country.

15. A method for a multi-country data pipeline to protect a Personally Identifying Information (PII) for each user in a plurality of users, comprising the steps of: receiving, by a first application, entered data from a user, wherein the first application, the entered data and the user are all physically located in a first country and the entered data comprises non-personal data and the PII; receiving, by the first application, a schema from a third country based on a privacy policy for the first country, wherein the schema is stored with a plurality of schema in a database and the plurality of schema in the database are stored in the third country; identifying, by the first application, the non-personal data and the PII in the entered data based on the schema; generating, using a one-way hash, an Identification (ID) tag for the PII; storing, in an identity store, the ID tag and the PII, wherein the identity data store is configured so that when it receives the ID tag, the identity data store outputs the PII; creating an anonymized data by replacing the PII, in the entered data, with the ID tag for the PII, wherein the anonymized data contains no PII; transmitting, through the multi-country data pipeline, the anonymized data from the first country to an analytics function in a second country; generating, by the analytics function, a results based on the anonymized data; creating an anonymized results by adding the ID tag to the results, wherein the anonymized data contains no PII; transmitting, through the multi-country data pipeline, the anonymized results from the second country to a second application in the first country; upon authenticating the user, transmitting the ID tag to the identity data store; receiving the PII associated with the ID tag from the identity data store; adding the PII received from the identity store to the anonymized results to create an identified results; and performing an action by the second application based on the identified results.

16. The method of claim 15 , wherein the schema identifies a plurality of PII fields in the entered data based on the privacy policy of the first country.

17. The method of claim 15 , wherein the first country, the second country and the third country are three different countries.

18. The method of claim 15 , wherein the PII never leaves the first country.

19. The method of claim 15 , wherein the first application is a different application from the second application.

20. The method of claim 15 , wherein the first application is the same application as the second application.